IN THE CLAIMS 



This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

1 . (Currently Amended) A method for remotely activating a covert service channel 
comprising: 

using a transport m e chanism to send a trigger from a remote cli e nt to a host; 

receiving at a host a trigger sequence sent by a remote client to the host via a transport 
mechanism, the trigge r sequence comprising a series of attempts to connect to the host via a 
prescribed sequence of two or more trigger ports ; 

authenticating the remote client based at least in part on receipt of the t rigger sequence ; 

and 

opening the covert service channel to allow a conn e ction with the remot e host the 
authenticated remote client to communicate with the host via the covert service channel 

2. (Previously Presented) A method as recited in claim 1 wherein using a transport 
mechanism to send a trigger further includes using a protocol to format the transport mechanism. 

3. (Previously Presented) A method as recited in claim 1 wherein using a transport 
mechanism to send a trigger further includes using a backscatter effect as the trigger. 

4. (Currently Amended) A method as recited in claim 1 wherein opening the service 
channel on the host further includes opening a port other than a trigger port . 

5. (Previously Presented) A method as recited in claim 1 wherein opening the service 
channel on the host further includes sending a reply to the remote client. 



Application Serial No. 10/677,732 
Attorney Docket No. SYMAP032 



2 



6. (Currently Amended) A method as recited in claim 1 wherein opening the service 
channel on the host further includes spawning a service if the remote client is authenticated 
based at least in part on the trigger sequence is auth e nticat e d . 

7. (Previously Presented) A method as recited in claim 1 wherein opening the service 
channel on the host further includes establishing a connection between the remote client and a 
service on the host. 

8. (Previously Presented) A method as recited in claim 1 wherein opening the service 
channel on the host further includes receiving a request from the remote client. 

9. (Previously Presented) A method as recited in claim 1 wherein opening the service 
channel on the host further includes sending a response by an operating system on the host to the 
remote client. 

10. (Previously Presented) A method fas recited in claim 1 wherein opening the 
service channel on the host further includes sending an address from the host to the remote client 
for establishing the connection. 

1 1 . (Currently Amended) A system for remotely activating a covert service channel 
comprising: 

a communication interface configured to receive a trigger sequence sent by a remote 
client via a transport mechanism, the trigger sequence comprising a series of attempts to connect 
to the system via a prescribed sequence of two or more trigger ports t ransport mechanism for 
s e nding a trigger from a r e mot e cli e nt to a host ; and 

a processor coupled to the communication interface and configured to authenticate the 
remote client based at least in part on the received trigger sequence and open stealth application 
on th e host for rec e iving th e trigger from th e remot e cli e nt, authenticating the trigg e r on th e 
target host, and op e ning the covert service channel on th e host t o allow a connection with the 
authenticated remote client to communicate with the system via the covert service channel . 

12. (Canceled) 
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13. (Canceled) 

14. (Canceled) 

15. (Canceled) 

16. (Canceled) 

1 7. (Currently amended) A method for remotely activating a covert service channel 
comprising: 

sending a pre-defined trigger sequence to a port on a remote host , the trigger sequence 
comprising a series of attempts to connect to the remote host via a prescribed sequence of two or 
more trigger ports : 

waiting for a pre-defined time period; 

sending a connection request to [[the]] a covert service chaimel port on the remote host 
after the pre-defined time period has expired; and 

establishing a connection over the covert service channel with the remote host. 



18. (Canceled) 

19. (Canceled) 

20. (Cancelled) 
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